Our Solution

Futuralis crafted an all-encompassing solution for TeamCare Dental to accomplish HIPAA compliance by designing and implementing a robust AWS infrastructure capable of supporting their existing DigitalOcean workloads. This infrastructure features the setup of AWS accounts through Control Tower, which automates the creation of new accounts and ensures governance and guardrails in line with compliance requirements. Auditing and logging were configured using AWS CloudTrail and AWS Config, providing a detailed view of account resources and logging API calls made by users and services. To further strengthen compliance with HIPAA regulations, security guardrails were established using AWS Config rules, guaranteeing that all resources were encrypted and that access control policies were correctly configured.

The solution also involved setting up a VPC and subnets in multiple Availability Zones (AZs) for high availability, as well as configuring an Auto Scaling group to ensure that the application can handle spikes in traffic and maintain high availability across multiple AZs. The production workloads were migrated from DigitalOcean to AWS and configured to meet HIPAA compliance requirements. An Amazon RDS database instance was created and configured with multiple read-and-write replicas for high availability. The data was then migrated from the existing database to RDS and encrypted at rest to meet HIPAA compliance requirements.

To protect against common web-based attacks, such as SQL injection and cross-site scripting (XSS), AWS Well-Architected Framework (WAF) was set up with appropriate rules. A site-to-site VPN connection was established between the on-premises network and the VPC to ensure a secure connection between them.